infoTECH Feature

March 10, 2010

Web 2.0 Technologies Posing Risks to Security

By Lance Whitney
Web 2.0 technologies and other Web-based apps will pose the most serious risks to security this year, according to a survey of IT professionals conducted by security company Webroot. The survey questioned 803 IT pros from SMBs with 100 to 5,000 employees in the U.S., U.K, and Australia.
 
The majority - 80 percent - of those questioned said that Web 2.0-based malware will be their biggest headache in 2010, with 73 percent pointing out that Web-based threats are more challenging to handle than email-based malware.
 
Specifically, 25 percent said their companies are vulnerable due to holes in Microsoft operating systems, while 24 percent feared a risk from unpatched software, including Adobe Flash and Reader, Apple’s (News - Alert) QuickTime, Microsoft Office, and Sun Java. Vulnerabilities in the browser concerned 24 percent of those surveyed, and Web 2.0 apps such as Facebook, Twitter, and Google (News - Alert) Docs was a worry for 23 percent.
 
Social networking sites have already proven problematic. Around 24 percent of businesses said they’ve been attacked through sites like Facebook (News - Alert) and Twitter. But Web-based malware has sneaked in through other means. Among those surveyed, 23 percent said their networks have been compromised by workers who accessed personal Web-based e-mail, 25 percent were affected by employees who used P2P networking sites, and 32 percent were hurt by staffers who downloaded content via the Net.
 
Though many of the companies believe they have adequate protection in place, a fair amount still reported malware attacks. Among those IT pros questioned, 60 percent reported being hit by viruses, 57 percent found spyware, 47 percent were the victims of phishing attacks, 35 percent were hurt by hackers, and 32 percent said their Web sites were victimized by SQL injections.
 
Beyond basic protection, 88 percent of the businesses said they have employee Internet use policies, and 56 percent have specific guidelines about using social networking sites. Among those with policies in place, 95 percent said they enforce those policies, many through employee orientation and some by sending reminders one or more times a year. Among its own customers, Webroot has found that about half restrict employee access to social networks to guard against malware attacks as well as lost productivity.
 
The results of Webroot’s survey point out the need for businesses to protect themselves on several levels. Companies of all sizes need to safeguard their data and networks through effective and pervasive security software and technologies. But they also need to continue to educate employees about the potential risks of using social networks, downloading software, and surfing to the wrong Websites.

Lance Whitney is a journalist, IT consultant, and Web Developer with almost 20 years of experience in the IT world. To read more of Lance's articles, please visit his columnist page

Edited by Stefania Viscusi
FOLLOW US

Subscribe to InfoTECH Spotlight eNews

InfoTECH Spotlight eNews delivers the latest news impacting technology in the IT industry each week. Sign up to receive FREE breaking news today!
FREE eNewsletter

infoTECH Whitepapers